Ubuntu 24.10 USN-7287-1 Medium: libcap2 allowed unintended capabilities

ubuntu

February 24, 2025

libcap2 would allow unintended capabilities.

Summary

libcap2 would allow unintended capabilities.

Software Description:

- libcap2: POSIX 1003.1e capabilities (library)

Details:

Tianjia Zhang discovered the libcap2 PAM module pam_cap incorrectly

handled parsing group names in the configuration file. This could result in

certain users being granted capabilities, contrary to expectations.

Topics Covered

security advisory package update medium severity Ubuntu configuration issue capabilities management capabilities libcap2 libcap2 issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.10
   libpam-cap                      1:2.66-5ubuntu3.1

Ubuntu 24.04 LTS
   libpam-cap                      1:2.66-5ubuntu2.2

Ubuntu 22.04 LTS
   libpam-cap                      1:2.44-1ubuntu0.22.04.2

Ubuntu 20.04 LTS
   libpam-cap                      1:2.32-1ubuntu0.2

After a standard system update you need to reboot your computer to make all
the necessary changes.